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(54) MUTUAL AUTHENTICATION METHOD AND DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a mutual 
authentication method that keeps security against 
attacks and executes efficient authentication. 
SOLUTION: A random number A1 is generated in a 
STAB, a GAIMod P is sent to a SAT 2 by the Diffie- 
Hellman key delivery algorithm. The STA2 generates a 
random number A2 and sends GA2Mod P to the STA1. 
The STA1, ST A 2 obtain a shared key GA1.A2Mod P. The 
STA2 sends a certificate of a public key PK2 of the 
STA2 by an authentication station and a signature C2 of 
the GAIMod P by a private key K2 to the STA1. The 
STA1 sends a certificate of a public key PK1 of the 
STA1 by an authentication station and a signature C1 of 
the GA2Mod P by a private key K1 to the STA2. The 
STA1, STA2 confirm the legitimacy of the public key 
based on the received information and authenticates the 
signatures with each other by using the respective 
public keys. 
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(57) [Kttl 

[*R*#ai STAlT?«URAlfc£jfcU Diffie-H 
enmaniffiftMT/l'^yXAfcJ: 0 G A1 Mod P£STA2 
^iSO. STA2T'{iA2££j£U G A2 Mod PSrST 
Al^jMD. STA1, STA2X'^IG ftl • fl2 Mod 
PSr#S. STA2{iSTA2e9^HPK20i2SE^ 

tc i affiij»fc ■e^sesnK 2 tci & g* 1 Mod p izm- 

■?>g£C2£STAl-'\3M*K STAll«<% v ^iP 

Kl<9aEH/«fc*<^£fflHKl£J:&GA2Mod P(c*f 

•rSS*C 12rSTA2^jtl.. §STA1, STA2 



*• 2 at 

iKffi • g k> 3 icE? 




0 



( 2 ) mmw- ii-i9i76i 



limmi ] 2^<05Ha^SSTAl . STA2<50— 
^jifi^SSTAl^a^Al5:%^L. H8I&F £ J: 
ot. F (Al) SrJUttJUCF (Al) Srffe^MflliS 

a s t a 2 izmm l . 

ilfi^ffiSTA2*>SL^A2S:^tt. I^GtCj; 
T. G (A2) ^mmLTG (A2) £jiflgs!SSTA 
lKSMflU 

ii^gSTAKiSLScAl gfitTtG (A2)*> 

41MtSK££j£U 

Mfa^HSTA 1 |j, 

® fflft^ssTA i <D7 : J?jum&mmK nznm-t^ 

® fgfiE^m: S P K 1 Aua-r B 1 (J2TF, 
ffltffgP I t . I2iE«^ct h P I KJWe^^A** 
^fficOik^. P IOSHWkBfX • fc®{±STAl 
cO^rWItPK 1<01F3»S IT**. ) 

• G (A2) «9«<IS«STAl<0**fljftKlt;:J:S 

-r^^i^sc l 

£ift@£B S T A 2 £32l{t L . 
jIfii£gSTA2t± 

• iifi^MSTA 2 <r>f s J?)vm*xm&ti icttts-th 

&BMPK2«OiP9»S2 

®F (Al ) <Dffl«^STA2tf>S*fflttK2fcJ:& 

x>*^^s=ac 2 

«»I§«STAl{C3aiU li^ISTAL ST 

[HW&H2 ] ±IEG ( A 2 ) ^S^fflUK 1 tcjr^r 
y?;H*Cllt G ( A 2 ) SriaRfc-TirafifeH (G 
A2) KWiKl^iir^Hf^STJbO. 
±I5F (Al ) ^S*ffliK2tJ;l.f^;H^C2 
«U F (Al ) fcSSRfc-tinftl (F (Al) )t» 

^h\t2\,z£&?i/?)\sm%,x*ibhz\kzmmt'?hm 

[3ft*JS 3 ] ±ieWgCH<7)^ilci: LT . iSEHJRA l 

issm. i LT±ifiSLSscA 2 <i 

SrWafc-f *IB««2fatt<0ffl5S8iE*JS. 
[»*3S4] 2^IiilSTAl. STA2t?)- 

*o®fi^s s t a 1 tf&mma zmxcomimw. s t 

A2£iMftU 

»rag«STA2#a»A2£»ii=U B8RGt=J:-> 
T»: G (a. A2 ) Sr^tBLTG (a. A2 ) 
ISTA1 (CjMff L , 

IfMSTAllj:. G (a. A2) *>«ISK?: 
£J£U »<SilBSTA2{iA23&»A>«MMiSK*±jR 



ft* LfcfBWBI SKJfflv 3 Mil i/xf 

ilft^a S T A 1 tiSJk A1^±L. 

• aft^ssTA 1 ^)fx^/n«ffliK 1 izttm-tz 
^mmPKicommms 1 

® (Al, G ( a . A2) ) <7)ilflgaSTA 1 OS£ 

ffl»K 1 (cj:Sfy7/H=SC 1 

®SLSStAi 

£afil£SSTA2fc:i*flU 
ilffi^aSTA2ii 

• aftSBSTA 2<0r^*^;l«*ffl«K 2 t^js-rs 
^HM|PK2<^EBJ»S2 

•BBftlfcfflWtJMiSfi.* (Al. G (a. A2) ) 
<7)Mfl^SSTA 2cr>W&mmK. 2i,zXi>7 ~J9)Vm%x 
C2 

SriHSSBBSTAlfcitMSU iHSKBSTAl, ST 
A 2-C*ft-mgffiLfcEBH#i: "rVlnVm&rtimk 

[Sf#Jg5] ±fS (Al. G (a. A2) ) Iztttt 

m&mmK 1 1 i ^/us*c 1 »±. ( a 1 , g 

(a. A 2 ) ) fcSERfc** KiiC H (Al . G (a. A 
2 ) ) t*f-T £> K 1 «fc 9 * 

iie(Al, G (a, A2) ) t«i-5»«ffljiK2t= 
11,7^^0 211 (Al , G (a. A2) ) £ 
^iiCi-r ^raSSC I (Al. G (a. A2) ) fc*ffSK 

2tj:&**-c*4c t ^mt-thmm-mAtm^n 

[ ft *8 6 ] &R A n . ft*aS^S| S K , SSEfflftBR 
ft P K n OSSEJ^aSPUlS , &BHgt PKni ttfcf h * 

LfcmwmmmmAG (ad *e*t4ffi«#ai: . 
jjesjra n %&m-&'mm&^®k , 
jjeslsa n s^t^s wrs***^ n&Mfflsor 

ffl^a«^s*^<o^iiiifflB8isaG (Ai > tstsscA 
iMimsmmmmmG (ad t^L±ies^?mn 

*B^aft^S*^O^g3itPK i tWI»iEBBS*^^ 
cO^HP K i <OlSffi*llB'^S^HMiWB¥ai: , 

±iaffl^amgaA^onK*fflMS[(iG (An)ts 
•thm&c i *±ge^BnatPK i -r«aE-r4»*ttiE* 
at. 

mm%t *>^ffls:ggEfc*W4SdiEis***ja-t4^ 

±ieaiiisaiffljS8t¥S^«»»»F (An) . ±ies^ 
c ni3 j:i/±£^KMip k nc^mmm: ussmmski 



®*^<7)Bf^BlSfflG (a. Ai ) kSUcAn. 
^|SK S igSEffl^^tPKn«OffiBJ^Sn. fCOPK 

ttS&Afflj&A n Sr±J&rSSlJ££j£*gte . 
ffl¥iIfI&Ba>$>0&ISg/3 fci 9 JJESURA n ^Bt^- 
ftLT«#BWtffiG {0. An) *»SBfrWafc , 
ffi^afi^BA^^Bi^MSfflS i=G (a, Ai ) t 

±iBttsayB&iiMt« t * a* ut . jjk=Hc*« sk^ 

IStEfflSUfcA n ' £±j^sajfc£j£#&i:. 
±f2ISIiEfflSJfcA n ' fc. ±ieffl¥fflftSB*^OBf^- 

ffl#««!£B*^<04tflMP K i £*rt£iiEH|»a>4>* 
«0&BMIP K i <0l£tt£«B*4&ra«!Wa#gti: . 
±Hffi¥ai<gilB36»^<OBi#B!BRffl[G (a. Ai ) 
8* A n ' **6C i Sr±IB<KrraitP K i TiftSE-*- 

±ienEMffl^a« . jjBB^n»«G (/3, a 

n) , ±ieSEBJ«SnSt^S^Cn, JbiBffl£B3«iI 

[000 1] 
[0002] 

tt-TI. . $E3foOfflSBSK1£fcUX 5 0 5 6-3 (IS 
O/I EC9 7 9 8-3) 5 . 2Mu t u a 1 Aut 
hentication (ffiSfgfiE) liZ^f>hWSSSS£. 

• 5. 2. 1 Two Pass Authentication 

• 5. 2. 2 Three Pass Authentication 

• Man in the Middle 
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• Replay^ 

[0003] i-r. ^f&fcoffiSfgiE^&^ss^ 
•r. 

(1) 5. 2 . 1 Two Pass Authentication 
H7At3Two Pass Authentication <Dffl&i 1 $:m~$~ « 

wmwmzTitL. [ti, sta2]k#h-ss 

£S 1 2r^fi£-r^„ 

2 :aft^aSTAl(i31ft^aSTA10^raHPK 

i commw (PKitPKi iztt-t&mmmcomz, b 

DtTl, STA2, S 1 fc£jIff^BSTA2'VjM 
h. (07AO1) 

3 : Mfl^BS T A 2 ttjWtiia 1MSTA1 (DWVi 
SB 1 fcfflwcg^s 1 £«aEU «Btfc:T-^t&^)*& 

4 : jim^aSTA2(iTuh3;W^t5>I^3B*i^B# 
M£T2tL, [T2, STA1 ] lC*H-|>S« 1 S2Sr 

5 :SfiSiaSTA2{ia«iiaSTA2^&§aitPK 
2c7)fiEHHg ( PK 1 fc-f-OW^B 2 ) . T2 , STA 

1, S2*ii«SaSTA1^4. (I37AC7)2) 

6 :mmmwsTAnmmmw:sTA2frt>v)mwm 
[0004] 3, eotjaEmfrkt-^ts^f-jfe*^- 

(2) 5. 2. 2 Three Pass Authentication 
H7B{CThree Pass Authentication <0©Eg$-7ir?\ 

1 :fflft^aSTA2{iajSR2$r^L. iift^as 
TA 1-^jM^. (H7B01) 

2 :MftgBSTAl*m!£Rl ££l£U [Rl, R 

2, sta2] £*ff§w=ssi££j£-ri>, 

3 : ilfl^aSTA 1 li-r^M«PKl <0ffi"9»» R 

1, R2, STA2 , S 1 SrjIff^BSTA2^jMI). 
(H7BW2) 

4 :jlfi^aSTA2«jifi^aSTAl*^<0iEBW 

5 : a(fgaSTA2(i [R2, Rl, STAlldt 

6 : M(tgaSTA2«-e-c0^WliPK2OiiEHJ#. R 

2, Rl, STA1, S2*iHgSSSSTAlAj&£. 
(@7BC7)3) 

7 : }I{f SB S T A 1 Jiilflga STA2K <0|IBJS 

[000 5] 4 . 7<7>&E&tffi1j£ i>-£Wz-ot:1fr0t 
7°o h 
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• 5. 2. 1 Two Pass Authentication 

• 5. 2. 2 Three Pass Authentication 

TUt, tlT^ii B J-r^Replayl^Sr|5&< ,r kJiT* & 
Man in the Middle &m%ffi<'Z.bi&X't<%:^b^ 

• Man in the Middle Jfc?l 

iM^aSTAl. STA2 tWLTlglETohrj^ 
£31ffT&«g7J£}MMBIfI#STA3fr\ fflft&X 
STA 1 K«tf\ESIft*STA3jIfi§sia (KTSTA 

S S T A 2 T$> K> . jftf £C S T A 2 fcHjSFjEHtSa 
STA 3a*3I{i§SfISTA 1 tS-li-ii 

[0006] |gSE7*CJ h rJ;U r 5 . 2 . 1 Two Pass A 
uthentication j tC^t^-l>Man in the Middle iScSliH 

sAo-tota*. ^iEaffsasTA3(i, mmmw 

STAlfr$>mt>tlX£tl* 7-b-yJHIitSTA 
2^it9. Jlfl^SSTA2A^jllA>itT§^ y-fe- 

H*r$-£k#T*#.S>. 

1 : jiftSa S T A 1 «7°o h- =J;l^£ J3 £ & o B#*(5DB# 
giJ£TlkU [Tl, STA2]t»t4145SlS 

2 : mmmm stai lif^iiPK i <vmm. t 

1, S TA 2 , S 1 S:^IBIfi£gSSTA3'\M&< > 
(H8A<7)1 ) 

2 a : ^IE3ifI^SSTA3{±jifI^aSTAl*^^0 

'AmmPKwwpm, n , sta2, sixains 

ISTA2 / \jI-i>. (H8AC02) 

3 : «ff §§a S T A 2 teilff ItS S T A 1 *>h 0M?m 
Srffl wrg£ S 1 $r^-r £ . 

4 : iifl^aSTA2{i:7 n ub3;U$:i3^^-5B$^r(7)B# 
#J£T2kU [T2, STAI] (CJf-T4»&S2* 

5 :afi^aSTA2(i-5-O^BBItOljEBm T2, S 
TA1, S2Sr^FIEafi^aSTA3^3il-g». (H8A 
(7)3) 

5 a : ;FiBifI3g«STA3«iI«^SSTA2*>4>tfD 
^iW^fFJiS. T 2 , STAI, S 2 ^Jlfl^BST 
Al/\iMI>. (I28A<7)4) 

6 : mmm. stai iiMitga sta2*> bvwm 

[ 0 0 0 7] ^ClT'(i:5 . 2. 1 Two Pass Authentic 
ation tCOV^Ta^fcA*, 5 . 2 . 2Three Pass Authe 
nti cation IzMLXtm t3cS6£fr d <! k 4 . 

• ReplaylSc^ 

*IEjI{I£STA3A\ jIfiIiiaSTA2kSTAl<0 

mmzm%L. znumzm^x. mcotmmmtzu^ 
t iifi^a s t a 2 ctibi«^s s t a 3 wmmmw. 
sTAix'h&bmtz-tt&ztzmmt Lfinmrtm 



X'hh, 

[00 0 8] !2iE7-ohrj;U T5. 2. 1 Two Pass A 
uthentication j fc^-^|.ReplayJ$c^{±ia8 B<£> J; -5 (C 
=Sr4. img§gttSTAlfcSTA20SSE7*oh 
3;W#fi*;fl. iflSrTFjBHSSBKS T A 3 #BSW 

1 : ilffSISSTAl(i:roh3yUSrfe ( l^3B#ji'<7)B# 
*J£TlkU [Tl, STA2] te*W-&#SSl£ 

2 : ii«^asTA 1 nwAmmp k i wirml t 

1, STA 2 , Sl£5Ifc»BSTA2'vj£4. (08 
BC01 ) 

3 : mimW. S T A 2 J±iIfIl£S STA1H WSEBW 

4 :afiS6«STA2«rnKri^tJC:*-3^jft^ 
5fl£T2kU [T2, STAI ] fcitTSS*S2* 

5 : jl«^aSTA2«^-<?5^ltPK20iEBJ«, T 

2, STAI, S2£iIfi^BSTAl'\ii£&. (08 
B«02 ) 

6 : il«Sa STAI Jifflfliia STA2A^ 0)tR9M 

[0009] ortCJift^MSTA 1 fc (Mfl^aST 
A2T'Wt^^) ^IEiifi^aSTA3c7)|Siiro 

1 : iifiSiaSTAl(i:7'ah3;Uar*3i^5B#,£OB$ 
M£T1' tU [Tl' , STA2]l:Stl»S*S 

2 : Mff^aSTA 1 {A-€-<04H5H«P K 1 tOSHfflK T 
1' , STA2, S 15vFIEjIfi£iaSTA3'VjM.g>. 
(08BC7)3 ) 

3 : ^FjEiift^a S T A 3 {±»fl^a S T A 1 *»£><DaE 

4 :^IE3im^aSTA3(i5t<O^K^J;0ff^jifiJI 

aSTA2^raHPK2tfOSEBfl«. T2, STAI, 
S2£jIft£IBSTA l^S. (H8BC7)4) 

5 : iifi^asTA 1 liSKtgBSTA 20E93*£Jil 
UTg£ S 2 U ^fc^ftcofc&tirn b 3 

[0010] :fibhssbsta 3«. jifinasTA 

2#i£-o/£tf)kI3t.;>< 'yt-yJUiMSTAl^l 
^IEiifiSaSTA3{immi<0igiE«ri:rat«r 
S'JfflfgT 2 p CI k tc=5: 0 . jlfi^B STAI ti^JE 

mmmm s t a 3 tfsm^a s t a 2 ^ t £ jus 

S£k#T£4. m&^Ltcbk. BS^fcLfc-X-y-fe- 
i?£26dft LTBSEfcfr d £ k J: 0 . Replay^»Sfi&<* 
£k(±nr#gT'ftS. 
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[0011] L*»U ttEMmmi. gyttrn h ajl> 
iZftLXh Man in the Middle^^rff 3 Z. t t,z£ K) . 

5.2.1 Two Pass Authentication 

<. 

5.2.2 Three Pass Authentication 
[00 12] 

[^^jS^Lidt-rSPH] I»SWi, II 
mm^icM-timMUmcD. Man in the middle fcDfJf 

[00 13] 
[00 14] 

a i At, zcomtmm i ^^sfeL^^oigsE^ffi 

» ft^lffifXOft-vCO^TMfl^aSTAl . S 
TA2* 1 «-^^LfcaS(A 1 , A2*»6*!fi3*LJt«[ 
G«'Mod P „ G^Mod PS-5-ixmi2iE^. ISM®* 

mztti?Ttt^mim& z t izx os^iu Dif«e-Hei 

Mod Pfc#ajl/C*Ffrt-&. 

[0015] &&G, PiiDiffie-Hellmanl^MT/l^'' 

fcs** ( sta i , sTA2<7)vvma>) tm^mE. 

* jif|gSSTAl{±g^fflg|K l£*tf£&liilHP 
K 1 <DtEHJi*i: , Diffie-HellmangtEiMT/l'rf 'JXAt 

s^s:3ifi^asTA2^jM^, 0 [si^taft^asTA 

2 ttg«JHttK 2 IZtttZViffimP K 2 WHBH»fc . G 

»Mod pizM-f&w&mwmmK 2 izx zw^zmmm 



BSTA 

[0016] ZcdZl 0 lz LT-fe ■/ 3 >-B#tc^;$fLT 
iSSSitfcflWIl : ££Tti. fie*3rffl<Olt«G*iMod 

p. G*2Mod p^wlt, mwm*co4kmm{fZfti&-t& 
ae#T-«*<, mnmz*mztix^2,&mmco&®> 

[ 0 0 1 7 ] 04 Oiifl^asTA 1 Iffl&Mt, 
G^Mod PfcjRJTU BiS?*i: G A3 Mod P^jEfflft 
SBSTA3^jH0. ^IE)lfI£iaSTA3(±SJ&A4 
££j«U G^Mod P^JHU CfifcigaESRSJttfc 
STA1MS. Milft^tBSTAl. ST 
A3«-€-il-PihJBaNiiK' = G*3 .A4 Mo d P^stMrf 
4. 

[0018] iKfc:*iILfcf8«ttK ' fUfftLTSf 
ft Srff 5 ftCflBlflKS S T A 3 «8Fg LfciHSSSB S 
TA2<?^^||PK2<?5aEB^^fflV>T£il5-3lflSia 
STAltCjUS^t^'T'^S^. »{l^aSTA2e75P 
K2fctfJ^S#&ffl«K2£to4>&Vvfctf>. G A1 Mod 
P S IE L V £ Mm^a STAl^j£S££** 

[00 19] fic-^TilfliiaSTAm. &HHPK2 
^PK2SrfflV->T, ^FjEiift^aSTA3 J; O^GftiMo 

d pt,zm-&s%,tw%-t2>i><7>£mELtimi,z, ^ 
2x-%^tmm~tz>. 

[0020] iJBt J: 0 . «£-*^Lfcffl#*lEBWo 
«-je^-SS*fflatK 1 , K25rjn-5TV^£ k^St: 

SEBJT'&S. £<73HMOJg!®fc::feVvT\ Diff ie-Hellman 
iH2M7*^=f 'J XA<7)ftt> K> tC, fSRDif f ie-Hel lmanlt 

[oo2i] %tmm.2{%m^2) 

tkfflm®^- (RSABf^- s E IGama 1 Hf^- S ^rfc') 
*ffl^T«lA2**^rL. ltA2SrfflV^Bf-f-5im^fi : 

1?5«^SrHSLTV^4. ££T\ H^tcfflV\|>^ 

ztizx*)^ m&sbtm*mmzftoi;mi>%-jtt>tL 
$>mzt]mm<Dtfmi} i mix&mMti i m& z t . 

riM/nf-n^j r Bg^lff tig 
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[0022] 122 izznmtmmomsEyn h ^)v<r>^ 

P K 1 & fcti P K 2 am tX' t P=5ro T V*T i> ft V 
<» ft *Q<D 1 aa<0{i-^c0jM«T'3iftilS STA1I1 

mmw. s t a 2 (iMftaa stai w^raa p k 
mmxt&izmmL. 3i<i^gsTA2t2. ajscA2£ 

?g£U ^MffiPK^J:oTSLicA2 5rBf^L^<iS 
2 fci2US^#^Mfl^aSTA 1 tc^oii-r. 
[ 0 0 2 3 ] aft^SSTA 1 fiS 2 S-ffi-f-LXaSCA 

Jiff HISTA 2fc, ( b ) <£§g«P K^JB-r-^f^ 

isK^oTi>i &mmPKiz£&vm-x$:'\mx' 

[00 24] U*^T, H«*L^^*^ (ST A 

1 , STA2W i-Ttlfr ) VM-<7M=jgfr cDfPJiS<0 

• IffiSSSTAlli, SLgtAl£3&£U 

• iiff glS T A 1 O&BflftP K 1 0>fiE«9». 

• iifSSSSTA KOfifffi^K HCJ;^. [Al, S 

2 ] . 
• Al , S2 

*a<i^asTA2tcsi-&. 

[00 25] Mfl^SSTA 2(i. 

• jlffgB S T A 2 CD&B8§t P K 2 tf)ffiBJ» 

■ jHSSBSTA2<0fB?B«K2fcJ:£ [S2. Al] 

• S2, Al 

siisiasTAicsi. 

[00 26] Z\ZT. ST A l- > STA2f)tli, S 
TA2^STA1 i0B#T\ S 2 1 A 1 cOJtH&WtlCfc -5 
TV^Oti, fi6*&T*>SX5 0 5 6-3 ( I SO/ I 
EC9798-3) 5. 2. 2Three Pass Authenticat 
ion mm^hUftlZtch-oX^h. M^Tfct>Htl®# 

mm. -fe 7 >- a ^ B*t^fig$ ilTiM££ "Tfg 

^r-nfB: cici-m, Ai, S2j, iiBjs^^paa^ 



m(ojtffacoivtfimx'& h z t Zfn lx v>a . 

[0027] ilBtcj; 0 . H^S*t^ffi¥^iE B JS^ 
ttm-t&W®mK 1 , K 2 SrSloT V>£ i t 5tH 
E 1 Gam a 1 „ ftRE 1 Gam a K 7t» 

msmttizmm-zjmx'h h . 
[0028] lies i cfflv^ti4asa«s t a 1 

/•^ X£j£3*ufcSURA 1 , aEiHT^n'U XACfflV^ 
^ft.£#iPHW$gG, P. &£&£j&ffil 3X'£j&i$tlfz 

s k . zcommmm stai <^hmi pkkos 

fWP K 1 i:«-<o»*fflifHMiK 1 . ffl^affg 
KSTA23&»feiS/i,^3t«ffiSISfflB8R«aS*G (A2) 

[0029] smssb 1 4 -c{±ajR a i . &mmm 

P , GtfiXUZtiXmg&Tfr* 'J XAC J; S^K^ffl 
Wi&F (ai ) 3&s^sc§ixs 0 ^SliMT;w^y 

XAIMf Li>Diffie-Hel lmanCOT;l-3'U XA(CRS^> 
-T. »iaJRA 1 UfcWa*f«ffl-TS iOT* 

*Uf «t \>\ H&mau&M 1 3 T'Jiffl^ilftSIS S T A 2 
a»S><75flBKaUHBfflRttG (A2) fc s SURAlk**^ 
*<oa»MI S K ^^^c LT . leifgB 1 1 tiEttt* . 

[0030] mzsmmx-teG < a 2 > tcM l. kic 

±S*«£it«ffo;fca». G ( A 2 ) &SSRk-r4RB» 
H ( G ( A 2 ) ) , mtiiG (A2) £S8RffifLfcfMl 

1 t>ft&nLfcfc<?DT't>J:v\ *^6«iAl+G (A2) 
g^X(iH (Al+G (A2) ) btXhX^\ £->X 

zeymrctesmmmms 1 stg ( a 2 > t a 1 £sg& 

tbTMgCH (Al, G (A2) ) *«S»U. -e^* 
*S*K«l^ ¥^351 6T\ S«JHtt«aK 1 t^J; 

[003 1 ] Zcom^U 1 7 T<±S«SS 1 6 c^g^S^ 
JR. o4 i)B8Effl#fcC it. ^BBUPK l <®BtC 

*r l % * at {i^ti^s^jssB i8K cvmmmztt 

Stffffi 1 4 fflffigtSR F(A1) , ^Bf^-^ 1 7 cOHf^- 

fta* jwsfta i 9 ic j; o as^a s t a 2 4 h'ffl^a 

[0032] iifl^SSTA2*^=5ri:^*^0{i# 
{±, G ( A 2 ) ^WH^gPl S^A^l^ix. ft^M 

s k zsuMMpygmmwmim 2 1 s k t- 

a#$n4. a-^152 loai**<0^HMIPK2<0EHJ 



(7) 



#BJ¥1 1-19 176 1 



2 30#«fflB(S»fc:t fc-?# . 8ISEB*£j£« 1 8T'^ 
JllttfjMMPP» 2 4 tc J: 9 fir fcft 6 . -Stcti . ^ ft 
1 0 0 3 3 ] 134 izm2 U£*3»bjb2 ^saisai 

STA 1 C0«tg«fi£?rl23 tMjC-r-S.SI5^fcPl-^#£ 
EttSfU ifcG (A2) OftOtB^flWRG (a. A 

2) =s2j&*£«§*i&. flts&Kmcu, leii^s 
t mmmm&mm a t tmm £ ft . t rz&mm 2 0 -eg 

f3$fL3t«HMII*0«#fll«G ( a , A 2 ) li^tf 
«35 1 3 T4»B£I a T« S ft, tiff BHifcCTT'Ji A 2 # 
**«SKfc3ftTE*ffll lfcE«Sft4. L*»U 

miz&^x. a»±isai2 63&»^a»Ai*±iftL. 

(S2=G(a. A2) , A2) fc*tLfiS»*fflt6aF 

i x-m^LtztiK m3 corns tmmizmmmmmm 

MM 1 5TH ( A 1 , S2) fciggU dftfcfcfU m 

[0 0 34] ^ COmtmM 2 ^ Jo ■§> iifl^S S T A 2 
<7>*^(±EI4fcaatT5rrJ:dfc:« affiiSSfc. gLSi 
BSigp 2 7 tslra 2 tfaass ft. *<oslra 2 fc*t Ut 

^■®2 8T&mma<,z£*)m^t£tlG (a. A2) t 
£ ftT i*ft $ ft h . ^H^^SCTii A2ha«^M 
SIS K ft & . -5-^ffi«±iifISI« STAUIHt 
T£> & . fflff^S STA1, STA 2 (±Mft*% tcSSE 

[0035] Bl.ttMia4tt$lvt^*SK<?D&j£a 
SBIBa8L OS 9B1. [12^2rtl>fftBJi*0® , • 

cfe^Tiis*B s k \z i. o m^kZft o z\ t & < ffls 

[0036] 

#fc«fcl>Man in the middle J»gCD|Jfiit£. 2-p at 

[0037] zcowRcnmrnwrni (ai> t&v^T. 

^lE&J&3iSTA3j&*Man in themiddle 
TV^S««S:05fc^rr. ^jEpIft^SSTA 3«ilfl 

S T A 2 L,TUBHI»!I STAH;^0« 
U aff^SSTAHC^LT{±aff^aSTA2^ 



O-Ti-t^r^tc, afi^SSTA 1*^<0^ y-fe— 
4>StT51fl^aSTA2^0. )«aaSTA2fr 
?*-^*itt*l,TaMStS«STA 1 t,zm&. 

[0038] zomi^mizti^x . Ky-t&LzmT- 

•t&tzMz. ^IEiifi^SSTA3(J;mTiO a> . • . 

® ffi<I£M S T A 1 1« F ( A 2 ) Oftb 9 (C B#T« 
^UfcajftA336>4>n»Hfc:J:oT*ajSft«.H (A 

3 ) zm&. 

• S T A 2 fcfci F ( A 2 ) cOft;b 0 ifl-CSS 

^LfcSURA43Ei»feaik:J:'3T)|[aj$ft4l (A4) 

[0039] *'fibti:^X\ F ( A 1 ) £M 

ft^STA2lC. G (A2) ^ilflSISSTAl^* 
IZtpWfr&k. Jiff^SSTAl hSTA2(±^IEafi 
glSTA3WittO^V ^IB«tt SK^^^ai*-!.- 
i: t4r 9 . ^IEafte5 S T A 3 #31<§&5 STA1, 
STA2^rD-r^-r>Ii:* s 'C^ ; Sr^o figfiE<50 1 - p a t 
hB<0^-^y^<03#Bi:4#BO^ -y-fe-^tcfe^ 
TJ± : 

• ^FIEjifigaSTA 3 J±iIf!l5l«ST A 2 ^jMft L/t 
G ( A 2 ) IZftLX. aflSSSTAl<OT^;l^^ 
fflUK 1 ^fflV^fy7;lf« (Sigl) LTilfl^l 
ISTA2IC, KltC»JEr*4MHaPK10iEBJ»i: 

• ^iEilfl^a S T A 3 «4»fl^a S T A 1 tfft&L Ltz 
F (Al) t~«LT. ilfl^aSTA2<0-f^/l^^ 

mmv. 2 £m^xTi;?>um& < s i g 2 > LTiifis 
ssta 1 izK2 tzitm- h &mm p k 2 coiiEaj* 1 1 

[0040] L^Ltt^. 

( 1 ) ^iEiiftSgBSTASJiiEW^SEaSftJtTy 

(2) Mff^aSTA lc0td^>W4. F(A2){4S 

(3) MfI^BSTA20t;^WiF (Al)«Ji3&» 

TtSb. ^3EjlfIgaSTA3t{iS igl. S i g2£ 
]E L < »it LTiUftr - k «?FnrffiT*>S . 
[004 1]«C, i<0»IHWSUSJgJB2 (02) fc» 
V^Ts ^iE ; 5rlg=*STA3#'Manin the middle Jfc^ 

Elfl^a S T A 3 iiil^a S T A 1 , S T A 2 

2, A3^jlft^SSTAl . STA3cr>^mtZXi> 
S^S3. S2S:. iifl^aSTAl , STA2« 
UK 1 , K 2 SrW>tf*t* 4 i btf&KTX>&tf* 
^jEJiff^aSTA3(iKl , K2Z$Qh%WX\ Z. 

tii,s.^jmxh&. 



(8) 



mmw- ii-i9i76i 



[0042] IMZizX K) , .TOf&Hja^an in the middl 

ffm&wmz a v ->xmm t ?s zmmmizm ^&tz 
tb. x ■yt-'jcomm\Emii2\sixw^. vmruzsm. 

[01 ] Z<D^m<r>mmMC0UUTuhZl/Ucr)^-1ry 
X t ^ !E%mE.% S T A 3 #>Re P l ayJfc^ £ fft^T ^ & 

[03 ] nsfiw i wafisa^ffifi&w^-rrn -y 



?0. 

[04 ] mmM2commwnWii&ffif&mz*-ty'a>v 
[05] immuz&^x. ^jE%mEMSTA3m* 

n in the middle Jfc^£fft^T^&#3l£5K3m 
[06] *%B>1if^4^^T. TiE^H#STA 
3**Man in the middle &&£U&-X^&Vi'3l$:7fi-t 
0. 

[07] A(2Two Pass Authentication <7)^l^$:^f 
0. BtiThree Pass Authentication cO©E5Sr^-f"0T' 

[08] AfiMan in the middle JfcS£18ES£7K-f 0. 
BtiReplayJfc^flSB£^-0T$>& „ 



[1212] 



STA1 



STA1 (WSSSBStSKU: J: 'J . 



N+ A1 +S2+STA1 <7>85ffi**K1 C J: 4 



©ffi©gA2££^rL*:4B=? 
* r STA2T&£Z:«t£i65S 



HSTA1<7)!aBS»Pi< 



STA2 



i:iJ:5A2<PS&#3:S? 



^STA2<n£P3»PK2a)ffiEW* s m 

\M-S2-fA1+STA2<7)&S&K2t::j:5 X 




/SUIT* 



CpST 



#STAl-(?fcSC:££*SS8 



m 2 



[04] 



"- 27 AO 28 



G(a,A2)=S2 

SK 

K1 

PK10>SEWiS1 



24 



K1 



G(*,A2) 



16^ 



i 1. 



warn 



CI 



13^ 



SK 



*26 



S2 



18- 



23 1PK2 



n 



SK 
22 



I C2 



tsK 



19 



SB 



'17 



21 



20 



(9) 



nm^ ii-i9i76i 



[an 



o 



g * sa * w £ sa 
~ s m < j ^ s 
< p ^ ii ^> < ^ 




S « S SB ^ j Im a- 
< P S3 r£ ^fc 
g aj ;3 ^ co aj 



(10) 



ftBPP 11-19 17 6 1 



[03] 



12 



14 



SLSc 


A1 












iia«a 






*P.G 



19 



2. 



A1.G(A2) 
SK 

PKItDlESfrS 
K1 

P.G 



24 

S 



A1,G(A2) 



SK 



18 



I H(A1,G(A 2)) ^ £ 
S3 ^5^51^17 



SK 



_G(A2) 



*N 3 



SK 



22 



o L 



20 




STA1 

&&A1 Bgg3t+F{A1) 



*&?&8Ki££J£ 
K1 = I(A1.H(A3)) 



XSTA203 



K2CJ:<5 
RA1)<7> 



£LftA3.A4$lfefi!c 
STA3 



tS£E^3tgtt-|-H(A3) 



STA2 



ifflSfi*K1*SfeJife 
K1-J(A3,F(A1)) 



F 



K2=J(A4,G(A2)) 



\NX +STA1tOS*ffl«K1CJ:*NS;% -fSTA2(0^fflSK2C«i: 
NNN H(A3) K»T5S* l(A4) dttTSS^ W 

^^^^ 



K\\ +STA2(7)S*fflmK2tC i 5 




K2=L(A2,I(A4)) 



9777777777777, 

STA1 CD4£Bs&PK2<DbMS 
+STA2tf>;g££3&K2i; 



777777; 



XSTA1 CD 

K1C<£S 
G(A2)tC 



El 5 



(11) 



WBHPl 1-19 1761 



ime] 



STA1 



2l&ai*3l& 



[S3,Al] tC 



ST A3 



£ * A3c^ r * Hg#s;s3 



N^tA s i 20^1 fo^ft ^grA<<f)&teWpk<<m&* - 

N}-A1 -+-S3+STA1 <7)*£&SIK1 CC J: *\ J +A4+S2-+-STA1 <7>i&lg£gK1 IC «£ 5' 



^SEH^+STAS^^ftPKB 



STA2 



A2€fflUTJa&Ji£^£ft3 



, [A4,S2]IC^TSS^ 

/////// / s s / s / / 



s / / s s s~ 




XSl'A10)ifr£8 
Kit J: ^ 
S2.A4] IC 



0 6 



[07] 



A 



1 : STAltf?H9?«\ Tl,STA2,m.$TAZ]l^-f *STAI<?££ 



2 I STA208E9!*. T2.STAl.rr2.STAl]i.-^^--5STA203-* 




3 : STA2(D*£m&. R2,Rl.STAl,[Rl,R2,STAl]IC^^iSTA2^)*$ 

13 7 



[08] 







, STA1<731£«, T1.STA2. 
1 * [TI.STA2]U STA I 






STAt<OKW«. Tl. 
2 - STA2.ITl,STA2]l-W 
* -<-iSTAl(7?S* 


STA2^>S^S. T2, 
3 : STAl.[T2.STAI)C^ 
i*4STA2«?^ 


STA2*PBE9J*s -IZSTAI, 

< :rr2.STAi]K#1-4srA2<™tf 



STA3 (ftSJ<i«SLTV>&) STA2 



1 ; STAlOSEf^. TI.STA^ITl, STA2]^*t-f -S STAINS 



2 ! STA2*0ffi?!«> l-2,STA1.fTlsTAUJC^r*STA2W^^*) 



, . sTAi^iE^s, Tr,sTA2.rri 

* ,STA2]U*t-#-4STA><0¥fe 



4 - STA2*>reES, TZ. STAI. |T2 
* STAI]Uit+*STAa05ife 



